Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
File: jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft (raw, json)
Hash identifier: 06bL8GIohi9UmPP+2ij0/9YNOar8JRgz22o2VCJ6sVU=
Subject key identifier: 7E:20:C3:0E:61:56:49:93:DB:A4:7B:47:02:26:9C:69:C0:A4:B6:64
Authority key identifier: 8C:A0:FE:C1:8E:F2:9F:9A:AD:FE:96:2B:CF:74:08:90:DB:0F:73:90
Certificate issuer: /CN=8ca0fec18ef29f9aadfe962bcf740890db0f7390
Certificate serial: 0198D5BC31E1B67295887E56999F2C90EDC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
Manifest number: 0E33
Signing time: Sat 23 Aug 2025 07:02:17 +0000
Manifest this update: Sat 23 Aug 2025 07:02:17 +0000
Manifest next update: Sun 24 Aug 2025 07:02:17 +0000
Files and hashes: 1: jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl (hash: Mf1cz6liqvg418fMiH7FknzTdFecgs5NFweWIocA11w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:31:e1:b6:72:95:88:7e:56:99:9f:2c:90:ed:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ca0fec18ef29f9aadfe962bcf740890db0f7390
Validity
Not Before: Aug 23 07:02:17 2025 GMT
Not After : Aug 24 07:02:17 2025 GMT
Subject: CN=7e20c30e61564993dba47b4702269c69c0a4b664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:61:e5:59:18:0a:8f:02:c8:ce:9e:dc:c7:da:
8c:e1:65:08:45:f1:e4:ad:7f:8a:53:3d:82:a3:9f:
c7:d7:1a:96:34:22:ed:95:86:7c:52:fe:ba:91:bb:
82:d0:f9:09:03:58:84:24:a5:b6:da:84:b3:36:0c:
ae:2e:36:2a:0e:38:d2:58:11:35:f3:70:7f:71:b9:
2e:3d:39:5b:a0:43:1d:2c:84:a0:a2:d1:6e:73:a8:
c2:89:c0:8e:99:30:34:61:3b:b2:41:41:bd:56:84:
14:d8:fb:d9:0f:8b:5d:66:cf:72:92:29:fe:95:37:
ed:fb:a0:ad:5a:c8:ef:25:06:c1:bd:09:b7:46:26:
ef:e3:7c:36:98:f5:3c:45:26:6f:06:2a:97:9b:84:
50:8b:fe:4c:81:bd:e1:1c:a2:9a:8d:4a:8a:51:d3:
99:39:aa:18:b5:b7:1e:20:19:55:cb:83:c6:36:60:
46:3a:cb:a8:77:8f:06:f1:19:c8:c2:be:64:b8:a7:
7f:75:e1:52:e6:c3:15:10:3c:dc:2d:7a:92:f4:b4:
99:e3:d3:0b:27:9c:21:da:e5:e5:35:36:04:8b:3e:
77:5c:be:7f:34:75:fd:33:1c:2a:18:4f:ad:f5:84:
81:f2:38:90:9d:84:aa:b9:34:f8:c2:88:bd:90:7f:
d9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:20:C3:0E:61:56:49:93:DB:A4:7B:47:02:26:9C:69:C0:A4:B6:64
X509v3 Authority Key Identifier:
keyid:8C:A0:FE:C1:8E:F2:9F:9A:AD:FE:96:2B:CF:74:08:90:DB:0F:73:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:15:83:35:7f:55:24:f7:46:c0:38:ca:e9:39:1d:38:65:5f:
a6:85:b1:6d:b5:f8:ea:74:e9:34:69:ec:41:e0:e1:71:f6:72:
36:72:26:f2:e5:e9:6a:8a:e4:5a:29:d2:ff:75:7c:68:a2:51:
3a:af:ae:04:64:49:bb:3c:4d:6d:cc:7d:b1:0f:51:41:b2:65:
f7:87:30:4f:28:a7:58:a1:ac:9f:52:92:aa:c6:fe:88:26:ca:
65:e6:81:db:1a:7f:44:c2:e1:8b:ca:f4:5f:37:30:0b:26:6b:
6c:5f:08:7a:32:db:c2:ec:a1:16:83:38:b3:d8:c2:ab:96:9f:
e6:84:6e:d5:3f:80:1e:63:be:32:3d:c8:b8:74:a5:b2:67:b9:
f0:88:eb:88:36:a9:4e:10:68:ea:f1:76:ef:9d:0f:9a:59:54:
eb:6e:d3:84:07:40:2e:e1:46:3b:72:9d:7c:e3:90:dc:f3:d3:
78:60:b6:bf:9e:2c:80:ef:7a:3d:1d:87:ce:4c:61:49:f6:cc:
7a:bf:7b:5c:34:1c:a1:86:94:b3:50:a1:1c:47:0d:ad:85:0b:
50:dd:62:c5:a8:14:f6:48:39:65:66:5a:4d:4c:70:3c:02:af:
43:85:45:e9:f0:f9:79:49:6c:61:3b:77:2f:ab:58:ff:ca:33:
06:b8:00:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:39:55 2025 by rpki-client